CVE-2025-21418

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122

Affected software

No affected versions have been published.

Timeline

Published
Feb 11, 2025
Last modified
Jun 17, 2026
Added to CISA KEV
Feb 11, 2025
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-214197.1Windows Setup Files Cleanup Elevation of Privilege VulnerabilityCVE-2025-214207.8Windows Disk Cleanup Tool Elevation of Privilege VulnerabilityCVE-2025-214217.8Memory corruption while processing escape code in API.CVE-2025-214227.8Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.CVE-2025-214237.8Memory corruption occurs when handling client calls to EnableTestMode through an Escape call.CVE-2025-214247.8Memory corruption while calling the NPU driver APIs concurrently.CVE-2025-214257.8Memory corruption may occur due top improper access control in HAB process.CVE-2025-214267.8Memory corruption while processing camera TPG write request.CVE-2025-214278.2Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.CVE-2025-214287.5Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.CVE-2025-214297.5Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.CVE-2025-214307.5Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
CVE-2025-21418: High severity, CVSS 7.8 | Vulnix